Privacy Notice
Last updated: June 12, 2026
1. Who we are
Ease Flow is operated by Karalee Barbee. For the personal data described in this notice, Karalee Barbee acts as the data controller.
2. What we collect and why
| Category | Purpose | Legal basis |
|---|---|---|
| Account data (email, password hash) | Create and secure your account | Contract performance |
| Profile data from sign-in providers (e.g. Google name/email) | Authentication | Contract performance |
| User content (reminders, medicines, contacts, notes) | Providing the Service | Contract performance |
| Usage data and device/IP information | Security, fraud prevention, product improvement | Legitimate interests |
| Support messages | Responding to your inquiries | Legitimate interests |
Payment information (card details, billing address) is collected and processed directly by our payment provider Paddle, who acts as Merchant of Record. We do not receive or store full payment card details.
3. Sensitive information
You may choose to record medicines, dosages, or emergency contacts. We treat this information as personal data belonging to you and protect it using technical and organizational safeguards. Do not enter sensitive information you are not comfortable storing in the app. Ease Flow is not a medical service and is not intended for clinical use.
4. Who we share data with
- Service providers / subprocessors — cloud hosting (Lovable Cloud / Supabase), authentication, and analytics tooling that help us operate the Service.
- Merchant of Record (Paddle) — for sale of the product, subscription management, payments, tax compliance, and invoicing.
- Professional advisers — such as legal and accounting advisers, where reasonably necessary.
- Authorities — where required by law, court order, or to protect our rights or the safety of others.
We do not sell your personal data.
5. International transfers
Our service providers may process data outside your country, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data.
6. Data retention
We keep your data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, unless we are required to retain it for legal, tax, or accounting purposes. Billing records held by Paddle are retained according to Paddle's policies.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data; to restrict or object to certain processing; to withdraw consent; and to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us through the support channel in the app.
8. Security
We use appropriate technical and organizational measures — including encryption in transit, access controls, and row-level security on user data — to protect your information. No system is completely secure, and you are responsible for keeping your account credentials confidential.
9. Cookies
We use essential cookies and similar technologies (such as local storage) to keep you signed in and to operate the Service. We do not use advertising cookies. Paddle may set cookies on the checkout page that are governed by Paddle's own privacy policy.
10. Changes to this notice
We may update this notice from time to time. Material changes will be communicated through the Service or by email.
11. Contact
For privacy questions, contact Karalee Barbee through the support channel in the app.